What are the roles in Tivoli Service Automation Manager?

TSAM defines the following roles:

Table 1. Roles and groups provided by Tivoli Service Automation Manager

Role Description	Person Group (8 chars)	Role (10 chars)	Security Group (must be created in LDAP)
Service Administrator	TSAMSADM	PMZHBSADM	PMZHBSADM
Service Definition Designer	TSAMSSDD	PMZHBSSDD	PMZHBSSDD
Service Definition Manager	TSAMSSDM	PMZHBSSDM	PMZHBSSDM
Service Deployment Instance Manager	TSAMSSIM	PMZHBSSIM	PMZHBSSIM
Service Deployment Instance Operator	TSAMSSIO	PMZHBSSIO	PMZHBSSIO
Service Resource Allocation Manager	TSAMSRAM	PMZHBSRAM	PMZHBSRAM
WebSphere Cluster Service
Performance - AIX® Administrators	TSAMPAXA	PMZHBPAIXA	PMZHBPAIXA
Performance - WAS Administrators	TSAMPWAS	PMZHBPWASA	PMZHBPWASA
Performance - Linux Administrators	TSAMPLXA	PMZHBPLNXA	PMZHBPLNXA
Performance Monitoring Administrator	TSAMPPMA	PMZHBPPMA	PMZHBPPMA
Self-Service Virtual Server Provisioning component
Tivoli Service Automation Manager Administrator (for Self-Service Virtual Server Provisioning)	Not applicable	PMSCADMUSR	PMSCMADMUSR

Service Definition Manager

The Service Definition Manager role is designated for users who are responsible for triggering and tracking new service definitions. This role is also responsible for assigning the tasks for new definitions to designers, and to approve designed service definitions for instantiation.

Service Definition Designer

The Service Definition Designer role is designated for users who are responsible for creating new service definitions when instructed to do so by a service manager.

Service Deployment Instance Operator

The Service Deployment Instance Operator is designated for users who are responsible for instantiation of designed and approved service definitions. These users operate service instances, such as starting a job plan.

For self-service offerings, users assigned to this group are authorized to troubleshoot unexpected problems that arise with the automated fulfillment of service requests submitted by members of the PMRDPUSR (Offering Catalog user) group.

Service Deployment Instance Manager

The Service Deployment Instance Manager role is designated for users who are responsible for controlling and approving the execution of service instances.

Service Resource Allocation Manager

The Service Resource Allocation Manager role is designated for users who manage the allocation of resources (CIs) to service instances. For example, servers that are represented in CIs can be allocated to a specific instance.

Service Administrator

The Service Administrator role is a 'super user' for all aspects of service definitions and instances. This user has the authority to exercise all the functions of a Service Deployment Instance Manager, Service Deployment Instance Operator , Service Definition Designer, and Service Definition Manager.

For self-service offerings, the administrator performs a series of tasks that set up the applications to enable service requesters to initiate and manage the requests. This administrator also manages the offering catalog.

Performance: AIX Administrators

Users in this role are responsible for all kinds of performance and problem determination tasks related to AIX systems.

Performance: WAS Administrators

Users in this role are responsible for all kinds of performance and problem determination tasks related to WebSphere systems.

Performance: Linux Administrators

Users in this role are responsible for all kinds of performance and problem determination tasks related to Linux systems.

Performance Monitoring Administrator

Users in this role are responsible for all kinds of problem determination tasks. They have the authority to perform all tasks that are defined in the performance and problem determination tasks.

Tivoli Service Automation Manager Administrator (for Self-Service Virtual Server Provisioning)

Users in this role perform various administrative tasks that are available only in the administrative interface, such as managing the offering catalog for the Self-Service Virtual Server Provisioning component.

(http://pic.dhe.ibm.com/infocenter/tivihelp/v10r1/topic/com.ibm.tsam_7.2.4.doc/c_security_roles.html)